lp://qastaging/~chromium-team/chromium-browser/beta

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

916. By Chad Miller on 2013-08-27

* New release 29.0.1547.57: (LP: #1215361)
  - CVE-2013-2900: Incomplete path sanitization in file handling.
  - CVE-2013-2905: Information leak via overly broad permissions on shared
    memory files.
  - CVE-2013-2901: Integer overflow in ANGLE.
  - CVE-2013-2902: Use after free in XSLT.
  - CVE-2013-2903: Use after free in media element.
  - CVE-2013-2904: Use after free in document parsing.
  - CVE-2013-2887: Various fixes from internal audits, fuzzing and other
    initiatives (Chrome 29).
* debian/rules: Fix packaging-sanity test.
* debian/patches/search-credit.patch: Update URLs.
* debian/patches/disable_dlog_and_dcheck_in_release_builds.patch,
  debian/patches/wehkit_rev_parser.patch,
    No longer necessary. Deleted.
* debian/chromium-browser.sh.in: Include command-line parameters for
  registered plugins.
* Since we include remoting locales too, also split its locales info
  into the -l10n package correctly.
* debian/rules: Disable arm_neon_optional. Impossible with sandbox, AND
  breaks build right now.
* debian/rules:
  - Make unused-file matches simpler, and install rule more descriptive.
  - get-orig-source has to make the directory for the orig contents.
* debian/source/lintian-overrides:
  - Add old-fsf-address-in-copyright-file and image-file-in-usr-lib
  - Fix setuid-binary to be "source". Seems like it should be "binary". :(
* debian/checkout-orig-source.mk: Remove tests and add unofficialness
  marker file to orig tarball when we can't use upstream orig releases.
* debian/control: Set VCS URL to be accurate.
* debian/rules: Start rule to create patch that includes Launchpad
  translations. Never change upstream orig tarball. This will be a
  release-time manual rule that updates a quilt patch.
* New release 28.0.1500.95:
  - CVE-2013-2881: Origin bypass in frame handling.
  - CVE-2013-2882: Type confusion in V8.
  - CVE-2013-2883: Use-after-free in MutationObserver.
  - CVE-2013-2884: Use-after-free in DOM.
  - CVE-2013-2885: Use-after-free in input handling.
  - CVE-2013-2886: Various fixes from internal audits, fuzzing and other
    initiatives.
* debian/rules:
  - Keepalive in tests rule, to keep builder machines from reaping.
  - Further exclude a few tests that interact with fakeroot,
    ReadOnlyFileUtilTest.
* debian/rules:
  - Disable logging calls in chromium binary to save several MB of executable
    size.
* debian/patches/linker-asneeded-bug.patch:
  - Add patch to work around linker bug.
* debian/keep-alive.sh:
  - Treat disappearing /proc as error, and quit.

915. By Chad Miller on 2013-07-18

Removing testing code from rules near get-orig-src.

914. By Chad Miller on 2013-07-16

Update version for release.

913. By Chad Miller on 2013-07-16

debian/keep-alive.sh. Quit if disk environment disappears.

912. By Chad Miller on 2013-07-16

* debian/tests/:
  - Add smoketest to verify that chromium runs.
  - Add a empty webapps test file for notes about what parts of webapps will
    or should be tested.

911. By Chad Miller on 2013-07-16

* New release 28.0.1500.71.
  - Only one hardware arch builds the independent files, so in our sanity
    test that we install everything upstream built once and only once in
    packages, we have to consider whether this build didn't even try to
    take and use arch-independent files. Don't look for some file paths if
    we don't use them. (Also, if we match too much of what we used, also
    remove matches from the list of created. This should be better.)

910. By Chad Miller on 2013-07-14

Make a fall-back for when upstream fails to release a Release. Package up
as best we can from source control. debian/rules and debian/checkout-orig-source.mk .

909. By Chad Miller on 2013-07-14

Build reliability and automated-ui tests. We don't use these yet, but we will soon.

908. By Chad Miller on 2013-07-14

More explicitivity in testing things. Document exclusions.

907. By Chad Miller on 2013-07-14

Better comments and better built-files-are-packaged tests. FIx a bug in grepping stdin.